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We claim: 

1 . A method of routing packets through a 
communications network having a plurality of distinct sets 
of virtual worts, no virtual port belonging to more than 
one of the distinct sets, a respective distinct broadcast 
address being\ assigned to each distinct set of virtual 
ports, the metnod comprising: 

assigning a respective egress address to each 
packet entering \ the network via an ingress virtual port, 
the respective egress address corresponding to a 
respective destirmtion address of the entering packet when 
a correspondence Between the destination address and an 
egress address is mown, and the respective egress address 
being a broadcast egress address corresponding to the set 
comprising the ingress virtual port when no correspondence 
between the destination address and an egress address is 
known ; and \ 

routing the packet according to the respective 
egress address, said routing being restricted to virtual 
ports belonging to the distinct set of virtual ports which 
includes the ingress virtual port. 

2. A method as defined in claim 1, wherein, 
when the destination address of the packet is a unicast 
address and a correspondence between the destination 
address and a unicast egress address is known: 

the step of assigning an egress address comprises 
assigning the unicast egress address/ said unicast egress 
address corresponding to an egress virtual port belonging 
to the distinct set of virtual ports which includes the 
ingress virtual port, the destination address being 
accessible from said egress virtual port; and 

the step of routing the packet comprises routing 
the packet to said egress virtual port. 
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3. A method as defined in claim 1, wherein, 
when the destination address of. the packet is a unicast 
address and no correspondence between the destination 
address and an egress address is known: 

5 the step of assigning an egress address comprises 

assigning a broadcast egress address corresponding to the 
distinct set of virtual ports which includes the ingress 
virtual port; and 

the step of routing the packet comprises routing 
10 the packet to each virtual port, other than the ingress 
virtual port, of the distinct set of virtual ports which 
includes the ingress virtual port. 

4. A method as defined in claim 1, wherein, 

15 when the destination address of the packet is a multicast 
address : 

the step of assigning. an egress address comprises 
assigning a broadcast egress address corresponding to the 
distinct set of virtual ports which includes the ingress 
20 virtual port; and 

the step of routing the packet comprises routing 
the packet to each virtual port of the distinct set of 
virtual ports which includes the ingress virtual port 
other than the ingress virtual port. 

25 

5. A method as defined in claim 1, wherein, 
when the destination address of the packet is a multicast 
address and a correspondence between the destination 
address and a multicast egress address is known: 

30 the step of assigning an egress address comprises 

assigning the multicast egress address, said multicast 
egress address corresponding to a plurality of virtual 
ports belonging to the distinct set of virtual ports which 
includes the ingress virtual port; and 

35 the step of routing the packet comprises routing 

the packet to each virtual port of said plurality of 
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virtual ports belonging to the distinct set of virtual 
ports which includes the ingress virtual port. 

6. A method as defined in claim 1, further 

comprising: 

assigning a respective ingress address to each 
packet entering the network, the respective ingress 
address corresponding to a virtual port via which the 
packet enters the network; 

using the assigned ingress addresses to populate 
address association tables; and 

using the address association tables to determine 
correspondences between destination addresses and egress 
addresses . 

\. A method as defined in claim 1, further 

comprising\ 

adoing to each packet entering the network via an 
ingress virti>a.l port the respective egress address 
assigned to tftat packet to provide a corresponding 
encapsulated packet; 

routing^ the encapsulated packet in the network 
according to assrteped egress address encapsulated in the 
packet; and \ 

removing fsom each encapsulated packet received 
at an egress virtualVport of the network the egress 
address assigned to tkat packet to provide a decapusulated 
packet. \ 

8. A method as defined in claim 7, further 

comprising : 

assigning a respective ingress address to each 
packet entering the network, the respective ingress 
address corresponding to the ingress virtual port via 
which the packet enters the network; 
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adding the assigned ingress address to each 



packet entering the network in providing the corresponding 
encapsulated packet; 

maintaining an address association table 
5 associated with each virtual port of the network, each 
address association table mapping each of a plurality of 
egress addresses to at least one corresponding destination 
address; and 

using the address association tables to determine 
10 correspondences between destination addresses and egress 
addresses , wherein : 



an ingress virtual port, said packet including a source 
15 address, an entry is added to the address association 

table associated with said ingress virtual port when said 
address association table does not contain the source 
address in any destination address field of said address 
association table, said entry comprising the source 
20 address in a destination address field and the ingress 
address in a corresponding egress address field; and 



port of the network, said encapsulated packet including a 
25 source address and an ingress address, an entry is added 
to the address association table associated with said 
virtual port when said address association table does not 
contain the source address in any destination address 
field of said address association table, said entry 
30 comprising the source address in a destination address 
field and the ingress address in a corresponding egress 
address field. 



respective egress address comprises routing the packet via 
trunks of the network; and 



on receipt of a packet entering the network via 



on receipt of an encapsulated packet at a virtual 
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9. A method as defined in claim 1, wherein: 

the step of routing the packet according to the 
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when the packet is assigned a broadcast egress 
address corresponding to a distinct set of virtual ports, 
the step of routing the packet comprises routing the 
packet via a restricted set of trunks containing only 
those trunks required to reach virtual ports in the 
distinct set of virtual ports corresponding to said 
broadcast egress address. 



10. A method as defined in claim 5, wherein: 
the step of routing the packet according to the 
respective egress address comprises routing the packet via 
trunks of the network; and 

when the packet is assigned a multicast egress 
address corresponding to a plurality of virtual ports in a 
distinct set of virtual ports, the step of routing the 
packet comprises routing the packet via a restricted set 
of trunks containing only those trunks required to reach 
virtual ports in the plurality of virtual ports 
corresponding to said multicast egress address. 

lY. A communications network, comprising: 

a plurality of distinct sets of virtual ports, no 
virtual portYbelonging to more than one of the distinct 
sets, and eacV distinct set being assigned a respective 
distinct broadcast address; 

at leastt one address assigner operable to assign 
a respective egrfess address to each packet entering the 
network via an ingress virtual port, the respective egress 
address corresponding to a respective destination address 
of the entering paqcet when a correspondence between the 
destination address >and an egress address is known, and 
the respective egress address being a broadcast egress 
address corresponding \to the set comprising the ingress 
virtual port when no correspondence between the 
destination address and\an egress address is known; and 

at least one router operable to route the packet 
according to the respect we egress address, said routing 
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being restricted to virtual ports belonging to the 
distinct set of virtual ports which includes the ingress 
virtLual port . 

^ 12. A network as defined in claim 11, wherein, 
when the destination address of the packet is a unicast 
address and a correspondence between the destination 
address and a unicast egress address is known: 

each address assigner is operable to assign the 
unicast egress address, said unicast egress address 
corresponding to an egress virtual port belonging to the 
distinct set of virtual ports which includes the ingress 
virtual port, the destination address being accessible 
from said egress virtual port; and 

each router is operable to route the packet to 
said egress virtual port. 

13. A network as defined in claim 11, wherein, 
when the destination address of the packet is a unicast 
address and no correspondence between the destination 
address and an egress address is known: 

each address assigner is operable to assign a 
broadcast egress address corresponding to the distinct set 
of virtual ports which includes the ingress virtual port; 
and 

each router is operable to route the packet to 
each virtual port, other than the ingress virtual port, of 
the distinct set of virtual ports which includes the 
ingress virtual port. 

14. A network as defined in claim 11, wherein, 
when the destination address of the packet is a multicast 
address : 

each address assigner is operable to assign a 
broadcast egress address corresponding to the distinct set 
of virtual ports which includes the ingress virtual port; 
and 
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each router is operable to route the packet to 
each virtual port of the distinct set of virtual ports 
which includes the ingress virtual port other than the 
ingress virtual port. 

5 

15. A network as defined in claim 11, wherein, 
when the destination address of the packet is a multicast 
address and a correspondence between the destination 
address and a multicast egress address is known: 
10 each address assigner is operable to assign the 

multicast egress address, said multicast egress address 
corresponding to a plurality of virtual ports belonging to 
=3 the distinct set of virtual ports which includes the 

=y ingress virtual port; and 

•4 15 each router is operable to route the packet to 

;*J each virtual port of said plurality of virtual ports 

y belonging to the distinct set of virtual ports which 

y includes the ingress virtual port. 

20 16. A network as defined in claim 11, wherein 

n each address assigner comprises an address association 

y table and is operable: 

* to assign a respective ingress address to each 

packet entering the network, the respective ingress 
25 address corresponding to a virtual port via which the 
packet enters the network; 

to use assigned ingress addresses to populate the 
address association table; and 

to use the address association table to determine 
30 correspondences between destination addresses and egress 
addresses . 

\ 17V A network as defined in claim 11, wherein 

y i\) each address assigner comprises: 

3 5V an ancapsulator for adding to each packet 

^^\entering the network via an ingress virtual port the 




\ 

respective egress address assigned to that packet to 
provide a corresponding encapsulated packet; and 

a decapsulator for removing from each 
encapsulated packet received at an egress virtual port of 
the network the egress address assigned to that packet to 

provide\ a decapusulated packet . 

\ 

18. \ A network as defined in claim 17, wherein 
each addressl assigner is operable: 

to assign a respective ingress address to each 
packet entering the network, the respective ingress 
address corresponding to the ingress virtual port via 
which the packet enters the network; 

to add the assigned ingress address to each 
packet entering the network in providing the corresponding 
encapsulated packet; 

to maintain an address association table, the 
address association table mapping each egress address of a 
plurality of egWess addresses to at least one 
corresponding destination address; and 

to use vthe address association table to determine 
correspondences (between destination addresses and egress 
addresses , wherein : 



on receipt of a packet entering the network via a 
virtual port corresponding to an ingress address, said 
packet including a source address, the address assigner is 
operable to add am entry to the address association table 
when the address association table does not contain the 
source address in Wny destination address field of the 
address association table, said entry comprising the 
source address in a, destination address field and the 
ingress address in fe corresponding egress address field; 
and 



on receipt q>f an encapsulated packet at a virtual 
port of the network, ^aid encapsulated packet including a 
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source aldress and an ingress address, the address 
assigner is operable to add an entry to the address 
association table associated with said virtual port when 
said address association table does not contain the source 
address iti any destination address field of said address 
Association table, said entry comprising the source 
address in a destination address field and the ingress 
address in\a corresponding egress address field. 

19 A A network as defined in claim 11, further 
comprising a plurality of trunks interconnecting routers 
of the network, wherein: 

each router is operable to route the packet via 
trunks of the network; and 

when the packet is assigned a broadcast egress 
address corresponding to a distinct set of virtual ports, 
each router is operable to route the packet via a 
restricted set of trunks containing only those trunks 
required to reach virtual ports in the distinct set of 
virtual ports corresponding to said broadcast egress 
address . 

20. A network as defined in claim 15, further 
comprising a plurality of trunks interconnecting routers 
of the network, wherein: 

each router is operable to route the packet via 
trunks of the network; and 

/ when the packet is assigned a multicast egress 

address corresponding to a plurality of virtual ports in a 
distinct set of virtual ports, each router is operable to 
route the packet via a restricted set of trunks containing 
only those trunks required to reach virtual ports in the 
plurality of virtual ports corresponding to said multicast 
egress address. 

21. A routting device for a communications 
network, the routing pevice comprising: 
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a plurality of distinct subsets of virtual ports, 
no virtual^ port belonging to more than one of the distinct 
subsets, each distinct subset being a subset of a 
respective oistinct set of virtual ports of the network 
and each distinct set being assigned a respective distinct 
broadcast address ; 

at lea^t one address assigner operable to assign 
a respective egress address to each packet entering the 
network via an ingress virtual port of the routing device, 
the respective egress address corresponding to a 
respective destination address of the entering packet when 
a correspondence Aetween the destination address and an 
egress address is known, and the respective egress address 
being a broadcast egress address corresponding to the set 
comprising the ingress virtual port when no correspondence 
between the destination address and an egress address is 
known ; and 

at least one touter operable to route the packet 
according to the respective egress address, said routing 
20 being restricted to virtual ports belonging to the 

distinct set of virtual ports which includes the ingress 
virtual port . 

22. A routing device as defined in claim 21, 
25 wherein, when the destination address of the packet is a 
unicast address and a correspondence between the 
destination address and a unicast egress address is known: 

each address assigner is operable to assign the 
unicast egress address, said unicast egress address 
30 corresponding to an egress virtual port belonging to the 
distinct set of virtual ports which includes the ingress 
virtual port, the destination address being accessible 
from said egress virtual port; and 

each router is operable to route the packet to 
35 said egress virtual port. 
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23. A routing device as defined in claim 21, 
wherein, when the destination address of the packet is a 
unicast address and no correspondence between the 
destination address and an egress address is known: 

5 each address assigner is operable to assign a 

broadcast egress address corresponding to the distinct set 
of virtual ports which includes the ingress virtual port; 
and 

each router is operable to route the packet to 
10 each virtual port of the distinct set of virtual ports 
which includes the ingress virtual port other than the 
ingress virtual port. 

24. A routing device as defined in claim 21, 
15 wherein, when the destination address of the packet is a 

multicast address: 

each address assigner is operable to assign a 
broadcast egress address corresponding to the distinct set 
of virtual ports which includes the ingress virtual port; 

2 0 and 

each router is operable to route the packet to 
each virtual port of the distinct set of virtual ports 
which includes the ingress virtual port other than the 
ingress virtual port. 

25 

25. A routing device as defined in claim 21, 
wherein, when the destination address of the packet is a 
multicast address and a correspondence between the 
destination address and a multicast egress address is 

3 0 known : 

each address assigner is operable to assign the 
multicast egress address, said multicast egress address 
corresponding to a plurality of virtual ports belonging to 
the distinct set of virtual ports which includes the 
35 ingress virtual port; and 

each router is operable to route the packet to 
each virtual port of said plurality of virtual ports 
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belonging to the distinct set of virtual ports which 
includes the ingress virtual port. 

26. A routing device as defined in claim 21, 
wherein each address assigner comprises an address 
association table and is operable: 

to assign a respective ingress address to each 
packet entering the network, the respective ingress 
address corresponding to a virtual port via which the 
packet enters the network; 

to use assigned ingress addresses to populate the 
address association table; and 

to use the address association table to determine 
correspondences between destination addresses and egress 
addresses . 

2\. A routing device as defined in claim 21, 
wherein eacV address assigner comprises: 

an ^ncapsulator for adding to each packet 
entering the network via an ingress virtual port the 
respective egress address assigned to that packet to 
provide a corresponding encapsulated packet; and 

a decapsulator for removing from each 
encapsulated packet received at an egress virtual port of 
the network the egress address assigned to that packet to 
provide a decapusuUated packet . 

28. A routing device as defined in claim 27, 
wherein each address! assigner is operable: 

to assign a\respective ingress address to each 
packet entering the network, the respective ingress 
address corresponding to the ingress virtual port via 
which the packet enter a the network; 

to add the assigned ingress address to each 
packet entering the network in providing the corresponding 
encapsulated packet; \ 
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to Vnaintain an address association table, the 
address association table mapping each of a plurality of 
egress addresses to at least one corresponding destination 
address; and \ 

to use the address association table to determine 
correspondences between destination addresses and egress 
addresses , wheorein : 

on receipt of a packet entering the network via a 
ual port associated with an ingress address, said 
packet including a source address, the address assigner is 
operable to add kn entry to the address association table 
when the address Association table does not contain the 
source address in\any destination address field of the 
address association table, said entry comprising the 
source address in a destination address field and the 
ingress address in W corresponding egress address field; 
and \ 

on receipt oh: an encapsulated packet via a 
virtual port of the network, said encapsulated packet 
including a source address and an ingress address, the 
address assigner is operable to add an entry to the 
address association table associated with said virtual 
port when said address association table does not contain 
the source address in any destination address field of 
said address association Ytable, said entry comprising the 
source address in a destination address field and the 
ingress address in a corresponding egress address field. 

29. A routing device as defined in claim 21, 

wherein : 

each router is operable to route the packet via 
trunks o f the ne twork ,* and 

when the packet is assigned a broadcast egress 
address corresponding to a distinct set of virtual ports, 
each router is operable to route the packet via a 
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restricted set of trunks containing only those trunks 
required to reach virtual ports in the distinct set of 
virtual ports corresponding to said broadcast egress 
address . 

30. A routing device as defined in claim 25, 

wherein : 

each router is operable to route the packet via 
trunks of the network; and 

when the packet is assigned a multicast egress 
address corresponding to a plurality of virtual ports in a 
distinct set of virtual ports, each router is operable to 
route the packet via a restricted set of trunks containing 
only those trunks required to reach virtual ports in the 
plurality of virtual ports corresponding to said multicast 
egress address . 

31. A routing device as defined in claim 28, 
wherein each router provides IEEE 802.1 switching 
functionality adapted to packets encapsulated with ingress 
and egress addresses. 

32. A routing device as defined in claim 28, 
omprising a respective address assigner for each distinct 

subset of virtual roorts, each address assigner being 
connected between ins respective distinct subset of 
virtual ports and a router of the routing device. 

33. A routing device as defined in claim 32, 
further comprising a switching element connected between 
at least one address assigner and its respective distinct 
subset of virtual ports, said switching element being 
operable to multiplex the virtual ports of the respective 
distinct subset of virtual ports onto the address 
assigner . 



34. A routing device as defined in claim 33, 

wherein: 

each switching element provides IEEE 802.1 
switching functionality; and 

each router provides IEEE 802.1 switching 
functionality adapted to packets encapsulated with ingress 
and egress addresses. 

35. A routing device as defined in claim 32, 
further comprising a plurality of VLAN demultiplexers 
connected to the router, each VLAN demultiplexer being 
connected between the router and a respective plurality of 
the address assigners, each VLAN demultiplexer being 
associated with a respective egress address and being 
operable to route an encapsulated packet from the router 
to an address assigner associated with the ingress address 
of the encapsulated packet such that all encapsulated 
packets having a common egress address and an ingress 
address corresponding to a virtual port in a particular 
set of the distinct sets of virtual ports are routed to an 
address assigner associated with that egress address and 
that particular distinct set of virtual ports . 

36. A routing device as defined in claim 35, 
further comprising : 

a respective VLAN translator connected to each 
address assigner that is connected to the VLAN 
demultiplexer, each VLAN translator being operable to 
apply a respective VLAN identifier to packets received 
from its respective address assigner; and 

a router demultiplexer connected to a plurality 
of the VLAN translators for routing packets received from 
an external router to a VLAN translator selected according 
to VLAN identifiers of the packets received from the 
external router. 
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37. A routing device as defined in claim 35, 
further comprising a respective virtual private router 
connected to each address assigner that is connected to a 
VLAN demultiplexer. 

38. A routing device as defined in claim 37, 
further comprising a respective network address translator 
connected to each virtual private router for translating 
addresses between a respective first address space used by 
its virtual private router and a second address space used 
by an Internet router. 

39. A routing device as defined in claim 38, 
further comprising an Internet router connected to the 
network address translators. 

40. A routing device as defined in claim 35, 
further comprising: 

an MPLS switch, the MPLS switch being operable to 
route packets between an Internet router and address 
assigners selected according to MPLS labels of the 
packets; and 

a respective MPLS converter connected between 
each address assigner that is connected to a VLAN 
demultiplexer and the MPLS switch, each MPLS converter: 
being operable to apply a respective MPLS label 
to each packet received from its respective address 
assigner, said MPLS label being uniquely associated 
with the MPLS converter; and 

being operable to remove MPLS labels from packets 
received from the MPLS switch. 

41. \a method as defined in claim 8, further 
comprising routing an encapsulated packet from the router 
to an address ass\igner selected according to the ingress 
address and the egress address of the encapsulated packet 
such that all encapsulated packets having a common egress 
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address and an ingress address corresponding to a virtual 
port in a particular^ set of the distinct sets of virtual 
ports are routed to an address assigner associated with 
that egress address arapi that particular distinct set of 
5 virtual ports. 

42. A method as defined in claim 41, further 
comprising: 

applying a respective VLAN identifier to packets 
10 leaving the network from a respective address assigner; 
and 

routing packets received from an external router 
to an address assigner selected according to VLAN 
identifiers of the packets received from the external 
15 router. 

43. A method as defined in claim 41, further 
comprising: 

applying a respective MPLS label to packets 
20 leaving the network from an address assigner, said MPLS 
label being uniquely associated with said address 
assigner; 

routing packets between an Internet router and 
address assigners according to MPLS labels of the packets ; 
25 and 

removing MPLS labels from packets received from 
the Internet router. 

44. A method as defined in claim 41, further 
30 comprising: 

applying a respective identifier to packets 
leaving the network from an address assigner, said 
identifier being uniquely associated with said address 
assigner; and 

35 routing packets into and out of the network 

according to their respective identifiers. 
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45. A method as defined in claim 1, wherein at 
least one physical port of the network maps one-to-one 
onto a corresponding virtual port of network, said 
physical port and said corresponding virtual port being 

5 associated with a respective distinct physical address. 

46. A method as defined in claim 1, wherein at 
least one physical port of the network maps onto a 
corresponding plurality of virtual ports of the network, 

10 said physical port being associated with a respective 

distinct physical address, and each virtual port of said 
corresponding plurality of virtual ports being associated 
with a respective distinct combination of said physical 
address and a respective virtual network identifier. 

15 

47. A network as defined in claim 11, wherein 
at least one physical port of the network maps one-to-one 
onto a corresponding virtual port of network, said 
physical port and said corresponding virtual port being 

20 associated with a respective distinct physical address. 

48. A network as defined in claim 11, wherein 
at least one physical port of the network maps onto a 
corresponding plurality of virtual ports of the network, 

25 said physical port being associated with a respective 

distinct physical address, and each virtual port of said 
corresponding plurality of virtual ports being associated 
with a respective distinct combination of said physical 
address and a respective virtual network identifier. 

30 

49. A routing device as defined in claim 21, 
wherein at least one physical port of the routing device 
maps one-to-one onto a corresponding virtual port of 
routing device, said physical port and said corresponding 

35 virtual port being associated with a respective distinct 
physical address. 
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A routing device as defined in claim 21, 



wherein at least one physical port of the routing device 
maps onto a corresponding plurality of virtual ports of . 
the routing device, said physical port being associated 
5 with a respective distinct physical address, and each 
virtual port of said corresponding plurality of virtual 
ports being associated with a respective distinct 
combination of said physical address and a respective 
virtual network identifier. 




